Schneider Electric Modicon M580 UMAS set breakpoint denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the UMAS set breakpoint functionality of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to enter a non-recoverable fault state,...

CVE-2018-7856

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of Service when writing invalid memory blocks to the controller over Modbus...

CVE-2018-7853

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid physical memory blocks in the controller over Modbus...

CVE-2018-7857

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus...

Design/Logic Flaw

A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service when sending invalid breakpoint parameters to the controller over Modbus...

Design/Logic Flaw

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible Denial of Service when writing out of bounds variables to the controller over Modbus...

CVE-2018-7854

A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a denial of Service when sending invalid debug parameters to the controller over Modbus...

CVE-2018-7855

A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service when sending invalid breakpoint parameters to the controller over Modbus...

Design/Logic Flaw

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause denial of service when reading invalid physical memory blocks in the controller over Modbus...

CVE-2019-6807

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a possible denial of service when writing sensitive application variables to the controller over Modbus...

Design/Logic Flaw

A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause a possible Denial of Service due to improper data integrity check when sending files the controller over Modbus...

CVE-2019-6807

CVE-2019-6807 affects Schneider Electric Modicon M580, M340, Quantum, and Premium PLCs. The issue is an Uncaught Exception (CWE-248) that could cause denial of service when writing sensitive application variables to the controller over Modbus. Connected sources confirm the vulnerability across al...

CVE-2018-7856

The CVE-2018-7856 entry concerns Schneider Electric Modicon PLCs (M580, M340, Quantum, Premium). The vulnerability is a CWE-248 Uncaught Exception leading to potential denial of service when writing invalid memory blocks to the controller over Modbus. Affected software/hardware is the Modicon fam...

CVE-2018-7855

CVE-2018-7855 affects Schneider Electric Modicon M580, M340, Quantum and Premium PLCs. The root cause is an uncaught exception when handling invalid breakpoint parameters sent over Modbus, which can trigger a Denial of Service with partial availability impact. Connected documents confirm the affe...

CVE-2018-7852

CVE-2018-7852 affects Schneider Electric Modicon M580 family (M580, M340, Quantum, Premium). The issue is CWE-248 Uncaught Exception leading to denial of service when an invalid private command parameter is sent to the controller over Modbus/UMAS. Talos advisories describe multiple DoS scenarios ...

CVE-2018-7843

CVE-2018-7843 concerns Schneider Electric Modicon PLCs (M580, M340, Quantum, Premium) with a flaw in the UMAS memory block read path over Modbus. The public Talos analysis describes an out-of-bounds memory read in the MEMORY_BLOCK_READ function that can trigger a non-recoverable fault, potentiall...

CVE-2018-7849

The CVE-2018-7849 vulnerability affects Schneider Electric Modicon M580, M340, Quantum and Premium PLCs. A CWE-248 Uncaught Exception could trigger a Denial of Service due to improper data integrity checks when sending files via Modbus. Affected firmware observed in Modicon M580 SV2.70 (e.g., BME...

ICSA-19-134-08 Siemens SIMATIC PCS7, WinCC, TIA Portal (Update D)

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC PCS7, WinCC Runtime Professional, WinCC TIA Portal Vulnerabilities: SQL Injection, Uncaught Exception, Exposed Dangerous Method 2. UPDATE INFORMATION This updated...

Siemens Industrial Products with OPC UA (Update H)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC, SINEC-NMS, SINEMA, SINEMURIK Industrial Control Products with OPC UA Vulnerability: Uncaught Exception 2. UPDATE INFORMATION This updated advisory is a follow-up to the...

ICSA-19-038-01 Siemens SICAM A8000 RTU Series

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SICAM A8000 RTU Vulnerability: Uncaught Exception 2. RISK EVALUATION The SICAM A8000 RTU series is affected by a security vulnerability that could allow unauthenticated remote...